Vulnerabilities

IBM’s X-Force security team published a warning this week that practitioners running production agents need to read: the attack surface created by agentic AI is expanding faster than CVE tracking frameworks can handle. The report, authored by Chris Ristig and Sandra Hill with contributions from CISO Threat Intelligence lead Adam Brown and X-Force Vulnerability Intelligence lead Jeff Kuo, is not abstract — it names specific capability classes and their security implications. ...

The headline number is uncomfortable: 87%. That’s the share of pull requests containing at least one security vulnerability when AI coding agents — Claude Code, OpenAI Codex, and Google Gemini — were used to build real applications from scratch. That’s the finding from DryRun Security’s inaugural Agentic Coding Security Report, published this week and already making waves through security and developer communities. This isn’t a synthetic benchmark. DryRun tested three leading AI coding agents building two real applications each, generating approximately five pull requests per agent. The result: 143 total vulnerabilities documented across 30 pull requests. Nearly nine out of ten PRs had at least one problem. The two leading failure modes were access control gaps and improper token handling. ...